Bendix EC80 Brake ECU

CISA reports high-impact vulnerabilities in Bendix EC80 Brake ECU variants (stack-based buffer overflow, out-of-bounds write, and hard-coded credentials) that could allow remote code execution or injection of arbitrary CAN bus traffic, potentially disabling ABS, steering assist, speedometer, shifting, or automatic traction control; multiple product versions deployed in the United States and Canada are affected and CISA provides mitigation guidance though no public exploitation has been reported.